A Strategic Cybersecurity Exercise (STRATEX Exercise) is a structured, discussion-based and scenario-led simulation aimed at strengthening executive-level cyber crisis preparedness through decision optionality, the decision-making process and decision execution. It always runs on the STRATEX Platform.
Each exercise has a training objective broken down into specific exercise objectives.
The exercise plays through a realistic cyber threat scenario consisting of one or more cyber attacks.
Decision-makers, in different roles and seniority, with the exact audience varying depending on the scope and context of the exercise.
Standard package exercises last 3–4 hours, while conference- or seminar-style events can last up to 2 days.
The content, situational awareness and analysis platform for the exercise.
Joint or distributed groups, moderated or non-moderated, on-site, online or hybrid.
Strategic cybersecurity exercises and cyber drills can be delivered at different scales, each with specific objectives, participants, scenarios and practical arrangements.
Coordinated simulations that strengthen an organisation’s ability to manage cyber threats through promoting unified decision-making and testing internal procedures.
Improve cybersecurity coordination and resilience within one industry or critical sector by testing shared threat scenarios and inter-organisational communication.
Assess a country’s readiness to handle significant cyber incidents through testing inter-agency coordination and public-private partnerships for maintaining essential services.
Enhance cooperation across neighbouring countries and jurisdictions by aligning policies and testing joint protocols for cross-border incidents.
Bring multiple nations together for global collaboration, information exchange and a coordinated response to cross-border cyber threats.
RiskSight’s proprietary, highly scalable, web-based application that is designed for strategic- and operational-level cyber exercises. It is developed and maintained in-house, available cloud-hosted or on-premises.
Decision-makers and experts taking part in the exercise.
Facilitators steering the scenario and injects in real time.
Technical and content managers of the exercise platform.
Hesitation, unclear mandates and conflicting priorities surface in a controlled environment.
Covers NIS2, DORA, ISO 27001 or other cybersecurity compliance requirements.
Response, communication and continuity procedures are tested through realistic scenarios.
Who speaks, to whom and when is rehearsed before a real incident.
Participants explore their decision-making mandates and where cooperation is required.
Recorded decisions produce an analysis and benchmarking report.
Scenarios cover a wide range of realistic cyber threats, including ransomware, insider threats, DDoS attacks, data manipulation, disinformation, 0-day vulnerability exploits, data breaches and other threats relevant to the organisation, sector or country.
Organisational exercises for C-suites, Supervisory Boards or similar can last up to 4 hours. Large-scale exercises, such as national or international, range from 1 to 2 days.
Yes, our exercises can be delivered on-site, online or in a hybrid format.
The exercises are primarily delivered in English with additional languages available on request. We have delivered exercises in Spanish, Portuguese, Ukrainian and Arabic.
Yes, the exercise can be delivered with a customer scenario on the STRATEX Platform.
Yes. The sectoral, national and regional packages are built for multiple entities rehearsing the dependencies and coordination between them.
As a cloud instance, the platform is hosted regionally according to where the exercise takes place. For classified exercises, a local server and network can be used.
Discover how RiskSight’s cyber resilience trainings increase user cyber awareness and executive cyber preparedness.
